Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/3bb650c9-15a0-3cb1-94e5-b7737535b282.roa
File:                     3bb650c9-15a0-3cb1-94e5-b7737535b282.roa (raw, json)
Hash identifier:          Cc1qrpomTrREUl0+/CcfUufhs9NY6iMt6WR+B5KjGdc=
Subject key identifier:   EE:64:33:86:7C:5D:25:AB:91:6E:FB:13:51:8F:AE:22:52:F7:CD:14
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9103B48880F9E7EAD860
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/3bb650c9-15a0-3cb1-94e5-b7737535b282.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20a4::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:91:03:b4:88:80:f9:e7:ea:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=9f9bda86-a12b-4310-907d-91387c9513fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:1b:8c:b1:6a:ae:70:51:58:56:74:94:66:
                    ac:31:b9:03:4d:04:57:b0:67:1a:fb:38:59:1a:5c:
                    93:a9:24:d0:2d:1d:90:de:98:3b:7e:e6:a2:5b:c4:
                    9b:e9:b6:20:29:e6:88:22:88:9c:be:64:76:3d:6b:
                    01:3c:64:52:76:8c:ba:84:d7:81:3e:c3:78:00:ba:
                    ab:e0:9f:30:c7:88:16:db:2f:fe:65:09:cb:5b:e6:
                    12:44:d3:94:4f:fe:b1:9a:36:9d:90:4e:ad:49:04:
                    41:d2:36:9d:01:f1:35:cd:0c:3b:fc:0d:ae:5b:9b:
                    e0:f4:b3:e3:17:4d:45:a1:2d:35:48:54:b2:05:33:
                    74:5c:3b:b7:4a:a2:48:cc:4d:93:4c:c3:ae:b0:07:
                    19:11:9a:ff:8a:d2:14:db:f4:df:fa:51:78:14:1b:
                    6d:97:da:b7:a2:01:95:1e:84:71:38:a6:b7:ef:85:
                    96:07:af:e1:ad:d4:b0:0c:fe:ba:8c:c6:e7:c4:82:
                    fa:0a:97:a4:85:a7:42:45:be:60:90:e3:f8:2f:b2:
                    63:a5:20:8c:5c:47:45:8b:83:48:f0:94:20:e1:3b:
                    c4:c7:a6:9a:da:89:76:f2:aa:0f:f5:3a:59:1e:91:
                    31:d9:c4:0e:79:80:ce:ee:93:18:59:e3:f4:74:bf:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:33:86:7C:5D:25:AB:91:6E:FB:13:51:8F:AE:22:52:F7:CD:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/3bb650c9-15a0-3cb1-94e5-b7737535b282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:f9:22:2f:12:30:d4:04:6c:88:96:af:4b:fe:76:02:6b:
         c1:9c:b6:dc:30:03:2d:f2:12:2f:d4:3f:ff:14:95:37:b4:a0:
         e6:66:07:58:66:cc:ec:1f:55:ab:e9:ab:d7:59:c0:56:c9:26:
         de:4a:aa:50:7d:c7:1b:33:23:22:8d:4f:a8:00:49:75:4a:6c:
         39:4d:4a:db:5e:ec:0d:e5:54:40:86:85:00:80:1e:ea:ca:c8:
         aa:9a:94:d0:3e:c8:3d:a2:72:bc:22:df:e7:f1:61:97:95:77:
         59:db:47:ae:43:86:9f:ee:a1:b2:17:6b:9b:19:3c:6c:46:fd:
         e6:bb:e2:b1:9c:aa:25:60:02:95:f8:1e:0c:55:36:bc:85:44:
         9c:cb:7b:d0:2d:4e:5f:92:8b:d7:ae:fb:0a:66:44:d3:4c:47:
         f4:97:cd:11:e2:47:af:04:ca:83:87:70:b2:48:98:50:a1:00:
         5d:38:70:4d:6d:44:2d:77:e8:f3:f6:f4:d4:49:03:3b:da:8c:
         6a:a2:5b:bb:31:96:52:d7:b7:f4:c9:bf:f6:08:46:c3:16:a5:
         fa:2b:c3:a0:29:2f:e2:eb:e5:85:a9:be:e4:11:bc:c2:be:e0:
         46:6b:c7:f7:c4:67:56:7b:8d:84:69:a1:e1:08:2d:4e:6a:86:
         0c:ff:a7:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DpEDtIiA+efq2GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OWY5YmRhODYtYTEyYi00MzEwLTkwN2QtOTEzODdjOTUxM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsIbjLFqrnBRWFZ0lGasMbkDTQRXsGca+zhZ
GlyTqSTQLR2Q3pg7fuaiW8Sb6bYgKeaIIoicvmR2PWsBPGRSdoy6hNeBPsN4ALqr
4J8wx4gW2y/+ZQnLW+YSRNOUT/6xmjadkE6tSQRB0jadAfE1zQw7/A2uW5vg9LPj
F01FoS01SFSyBTN0XDu3SqJIzE2TTMOusAcZEZr/itIU2/Tf+lF4FBttl9q3ogGV
HoRxOKa374WWB6/hrdSwDP66jMbnxIL6CpekhadCRb5gkOP4L7JjpSCMXEdFi4NI
8JQg4TvEx6aa2ol28qoP9TpZHpEx2cQOeYDO7pMYWeP0dL+TCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO5kM4Z8XSWrkW77E1GPriJS980UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvM2JiNjUwYzktMTVhMC0z
Y2IxLTk0ZTUtYjc3Mzc1MzViMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC1K+SIvEjDUBGyIlq9L/nYCa8GcttwwAy3yEi/UP/8UlTe0oOZm
B1hmzOwfVavpq9dZwFbJJt5KqlB9xxszIyKNT6gASXVKbDlNStte7A3lVECGhQCA
HurKyKqalNA+yD2icrwi3+fxYZeVd1nbR65Dhp/uobIXa5sZPGxG/ea74rGcqiVg
ApX4HgxVNryFRJzLe9AtTl+Si9eu+wpmRNNMR/SXzRHiR68EyoOHcLJImFChAF04
cE1tRC136PP29NRJAzvajGqiW7sxllLXt/TJv/YIRsMWpforw6ApL+Lr5YWpvuQR
vMK+4EZrx/fEZ1Z7jYRpoeEILU5qhgz/p9E=
-----END CERTIFICATE-----